v3.76.0

What's Changed

• Remove unused ws dev-dependency by @GrahamCampbell in #370
• Upgrade to mocha 12.0.0-beta-9.6 by @GrahamCampbell in #371
• Upgrade simon to v22 by @GrahamCampbell in #372
• Harden the AWS SDK v3 auth shim by @GrahamCampbell in #373
• Harden YAML parser unsafe key assignment by @GrahamCampbell in #378
• Standardize temp file random suffixes by @GrahamCampbell in #379
• Fix flaky large zip memory smoke test by @GrahamCampbell in #383
• Add YAML external ref policies by @GrahamCampbell in #382
• Fix YAML file ref policy for missing paths by @GrahamCampbell in #386
• Avoid leaking resolved values in variable syntax errors by @GrahamCampbell in #387
• Document security model by @GrahamCampbell in #388
• Harden plugin npm argv handling by @GrahamCampbell in #390
• Clean up plugin uninstall tests by @GrahamCampbell in #391
• Remove shell from Java and Ruby invoke local by @GrahamCampbell in #392
• Resolve Proxy-backed JS file variable addresses by @GrahamCampbell in #396
• Document scope of Proxy-backed file address resolution by @GrahamCampbell in #399
• Harden JS file address property access by @GrahamCampbell in #400

Full Changelog: v3.75.1...v3.76.0